PT-2024-8828 · Draytek · Draytek Vigor3900

Published 2024-10-21 · Updated 2024-11-05 · CVE-2024-51247

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: DrayTek Vigor 3900 version 1.5.1.3

Description: The issue exists due to the lack of neutralization of special elements used in the operating system command by the doPPPo function in the mainfunction.cgi script of the DrayTek Vigor 3900 router's firmware. This allows a remote attacker to execute arbitrary commands by injecting malicious commands into mainfunction.cgi and calling the doPPPo function.

Recommendations: For DrayTek Vigor 3900 version 1.5.1.3, patch the system immediately to prevent exploitation. Additionally, consider monitoring for exploit attempts and validate the system before exposing it to the internet. As a temporary workaround, consider restricting access to the mainfunction.cgi script to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-10464

CVE-2024-51247

Affected Products

Draytek Vigor3900

References · 10

• 🔥 https://github.com/fu37kola/cve/blob/main/DrayTek/Vigor3900/1.5.1.3/DrayTek_Vigor_3900_1.5.1.3.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-51247 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51247 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10464 · Security Note
• https://vuldb.com/?id.282871 · Note
• https://t.me/cvedetector/9617 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1852526490245632082 · Twitter Post
• https://twitter.com/oktsec/status/1852450019900576006 · Twitter Post
• https://twitter.com/CVEnew/status/1852496002436985159 · Twitter Post
• https://github.com/advisories/GHSA-f96w-x82r-jx85 · Note